{"id":2750912,"url":"https://alion.io/job/excellus-bluecross-blueshield-information-security-architect","title":"Information Security Architect","company":{"id":1914672,"name":"Excellus BlueCross BlueShield","domain":"excellusbcbs.com","url":"https://alion.io/company/excellusbcbs","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":80,"open_postings":5,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":17,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Rochester, United States","Buffalo, United States","Albany, United States","United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":122000,"max_usd":216000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":96},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"C++","optional":false},{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"Java","optional":false},{"name":"LDAP","optional":false},{"name":"Perl","optional":false},{"name":"PKI","optional":false},{"name":"TCP/IP","optional":false}],"status":"live","first_seen_at":"2026-10-16T23:57:58Z","employer_posted_date":"2026-10-16","last_verified_at":"2026-10-18T01:38:40Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Job Description:\nSummary:\nThe Information Security Architect assists in the development and execution of the information security risk management strategy, risk assessment philosophy and the IT components of Lifetime Healthcare Companies’ Enterprise Risk Management program. This position participates in IT security investment analysis, design, scope and approach. The primary responsibility is to provide technical expertise for the Information Security Group and serve as a trusted security advisor to the business and divisional initiatives. The architect helps to ensure a secure, risk based, and cost-effective infrastructure and application design is developed and maintained. This position advises and consults with Information Security management, and various levels of business and IT leadership, regarding the protection of corporate information and the direction of the Information Security Program.\nEssential Accountabilities:\nLevel I\nParticipates in development and implementation of security architecture principles and standards that align to the Organization’s overall business and strategy.\nDrives adoption and compliance of security standards across development and infrastructure teams both inside of and under contract with the Organization.\nCreates functional and technical security requirements and sees them through the project lifecycle.\nExecutes an overall risk management strategy with key business and divisional stakeholders. This risk management strategy includes enterprise integration of risk management into operational, regulatory/statutory, financial, technical, and security processes, including the creation of robust disaster recovery and/or business continuity plans.\nPerforms risk-based assessments of solutions and vendors to ensure appropriate security controls are adhered to.\nProvides security consultation, including design, reviews, and recommendations for various projects and initiatives.\nSupports the team by providing hands-on support for technologies owned and operated by the Security and Risk Department.\nEstablishes collaborative working relationships in the division and across the organization and subsidiaries to ensure that Information Security risks are managed, and the solutions align with the business strategy.\nDevelops processes, standards, and templates for managing information security risks. Supports the implementation of new standards and solutions in close collaboration with other divisional teams to allow the Organization to protect information assets (applications and infrastructure solutions) efficiently and effectively.\nConsistently demonstrates high standards of integrity by supporting the Lifetime Healthcare Companies’ mission and values, adhering to the Corporate Code of Conduct, and leading to the Lifetime Way values and beliefs.\nMaintains high regard for member privacy in accordance with the corporate privacy policies and procedures.\nRegular and reliable attendance is expected and required.\nPerforms other functions as assigned by management.\nLevel II (in addition to Level I Accountabilities)\nLeads the development and implementation of security architecture principles and standards that align to the Company’s overall business and strategy.\nHelps develop an overall risk management strategy with key business and IT stakeholders.\nFosters a risk management culture through education, skill development, and implementation of effective risk management processes and practices.\nActs as a mentor for department staff, providing subject matter expertise to the division.\nMinimum Qualifications:\nNOTE: We include multiple levels of classification differentiated by demonstrated knowledge, skills, and the ability to manage increasingly independent and/or complex assignments, broader responsibility, additional decision making, and in some cases, becoming a resource to others. In addition to using this differentiated approach to place new hires, it also provides guideposts for employee development and promotional opportunities.\nAll Levels\nFive (5) years of experience in an Information Technology Security Role.\nBachelor’s degree in computer science, information technology or relevant field. In lieu of a degree, six (6) additional years of experience required.\nExceptional communication and influencing skills with strong ability to balance differing stakeholder interests through sound analysis and persuasion.\nAbility to work collaboratively with all stakeholders, both inside and outside of the Organization.\nExperience with the following applications or enterprise security components preferred:\nIdentity and access management architecture and implementation, user provisioning/de-provisioning, single sign-on\nEnterprise directories (AD and LDAP)\nMulti-factor authentication\nNetwork and application-level security and encryption\nSecurity event management\nFirewall architecture and design\nCloud Security Controls\nWeb server security\nApplication security\nPKI system implementation\nData loss prevention systems and implementation\nIntrusion detection and prevention systems for network and host systems\nRemote access security controls\nMobile security\nStrong knowledge of TCP/IP protocols, broad and deep conceptual understanding of how Applications, Application Platforms, Operating Systems and Networks function.\nExperience with shell scripting, Perl, other scripting language, or with any programming language such as Java, C++, or C.\nFamiliarity with Sarbanes Oxley, HIPAA, HCFA, PCI/DSS and other regulations impacting security (with ISO27001 and NIST security standards) is preferred, as well as COBIT and COSO familiarity.\nDemonstrated ability to work with a diverse team and assist in developing and shaping the Organization’s Security Architecture.\nSound judgment, proven relationship management skills, and the ability to support security architecture aspects of business and IT initiatives.\nUnderstanding of process and its benefits in a maturing IT environment.\nAbility to quickly familiarize with newer security technologies, their implementation requirements, and how to integrate the technologies into a larger corporate solution.\nAbility to translate real-world threats into actionable security tasks by balancing functionality and performance needs with prudent security measures. This includes having a thorough understanding of the ramifications of various system security decisions.\nLevel II (in addition to Level I Qualifications)\nSeven (7) years of related experience in an Information Technology Security Role.\nPrior experience with architecture processes, strategies, and standards, required.\nExperience coordinating vendor solution delivery and partnering effectively with vendors to meet business needs.\nAt least one security industry certification (i.e., CISSP, CISA, CISM, SANS) preferred.\nPhysical Requirements:\nAbility to work prolonged periods sitting and/or standing at a workstation and working on a computer.\nAbility to work while sitting and/or standing at a workstation viewing a computer and using a keyboard, mouse and/or phone for three (3) or more hours at a time.\nAbility to travel across the Health Plan service region for meetings and/or trainings as needed.\nAbility to work in a home office for continuous periods of time for business continuity.\n************\nIn support of the Americans with Disabilities Act, this job description lists only those responsibilities and qualifications deemed essential to the position.\nEqual Opportunity Employer\n Compensation Range(s):\nLevel I - 87,766 - 157,978\nLevel II - 110,093 - 198,168\nThe salary range indicated in this posting represents the minimum and maximum of the salary range for this position. Actual salary will vary depending on factors including, but not limited to, budget available, prior experience, knowledge, skill and education as they relate to the position’s minimum qualifications, in addition to internal equity. The posted salary range reflects just one component of our total rewards package. Other components of the total rewards package may include participation in group health and/or dental insurance, retirement plan, wellness program, paid time away from work, and paid holidays.\nPlease note: There may be opportunity for remote work within all jobs posted by the Excellus Talent Acquisition team. This decision is made on a case-by-case basis.\nAll qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.","description_format":"text","description_chars":8564,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Dental insurance","Equity","Home office","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Health Insurance & Benefits"],"lifecycle":[{"event":"open","at":"2026-10-16T23:57:58Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":17,"reasons":["conf:0","win:early"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/excellus-bluecross-blueshield-information-security-architect","json_url":"https://alion.io/job/excellus-bluecross-blueshield-information-security-architect.json","meta":{"generated_at":"2026-10-18T07:07:49Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"assistant_verified","counted_by":"address","units_charged":1,"used_today":1211,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1914672},"rest":"https://alion.io/mcp/rest/get_company?id=1914672"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fexcellus-bluecross-blueshield-information-security-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fexcellus-bluecross-blueshield-information-security-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fexcellus-bluecross-blueshield-information-security-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/excellus-bluecross-blueshield-information-security-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fexcellus-bluecross-blueshield-information-security-architect"}]}